[v6ops] Dual ISP deployment operational issues and uncertainties

Klaus Frank <klaus.frank@posteo.de> Tue, 30 August 2022 01:38 UTC

Return-Path: <klaus.frank@posteo.de>
X-Original-To: v6ops@ietfa.amsl.com
Delivered-To: v6ops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E2BCC15949D for <v6ops@ietfa.amsl.com>; Mon, 29 Aug 2022 18:38:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -7.107
X-Spam-Level:
X-Spam-Status: No, score=-7.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, URIBL_DBL_BLOCKED_OPENDNS=0.001, URIBL_ZEN_BLOCKED_OPENDNS=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=posteo.de
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MnZWFxSL-exU for <v6ops@ietfa.amsl.com>; Mon, 29 Aug 2022 18:38:31 -0700 (PDT)
Received: from mout01.posteo.de (mout01.posteo.de [185.67.36.65]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27FABC1527A5 for <v6ops@ietf.org>; Mon, 29 Aug 2022 18:38:30 -0700 (PDT)
Received: from submission (posteo.de [185.67.36.169]) by mout01.posteo.de (Postfix) with ESMTPS id 22F88240026 for <v6ops@ietf.org>; Tue, 30 Aug 2022 03:38:26 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=posteo.de; s=2017; t=1661823507; bh=7EcJjNFeXCBHbhGt4wNcRlGAO5F7g0JyPHqjrUZCxDs=; h=Date:To:From:Subject:From; b=V9tQMWfbsqz6QijhBGL24VySAenxT5w/J9IPIY4rCmp8ZHSQwFQjFQ/FZP/dLMtTz q5d09fFr/A2OVc/6ov8vP929GIW9gQOgUAqXa5xwA8KAFJp3sQ6mphVr/0yf6MahF/ pygv5Ua0LthXSzX1t9CylNX2FlxDh45sYpvCsiAQLkjZoK1qPNrA2SE/WZEmr5fwqC XdNUlAYWWvtiFaWj3DM4Pj00mkB4hLhj/juRJE9BedNq0tJzCtbh4TL15aooq3l8ZU iegxMrqX0iDe9CLkUrc8eEkV3WDSK5RB3z3dHJnW07dKmzzf9A/yD8d/wjxaZPWVJL h+eYTS23YDkSw==
Received: from customer (localhost [127.0.0.1]) by submission (posteo.de) with ESMTPSA id 4MGqhL1Pwhz6tmQ for <v6ops@ietf.org>; Tue, 30 Aug 2022 03:38:25 +0200 (CEST)
Message-ID: <7d5420ee-4239-1892-e78c-20c40792cdb5@posteo.de>
Date: Tue, 30 Aug 2022 01:38:24 +0000
MIME-Version: 1.0
Content-Language: en-US
To: "v6ops@ietf.org" <v6ops@ietf.org>
From: Klaus Frank <klaus.frank@posteo.de>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg="sha-512"; boundary="------------ms020308020903070901060709"
Archived-At: <https://mailarchive.ietf.org/arch/msg/v6ops/u0JH7vote1uQnYwWXMwQ1hxDuPw>
Subject: [v6ops] Dual ISP deployment operational issues and uncertainties
X-BeenThere: v6ops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: v6ops discussion list <v6ops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/v6ops>, <mailto:v6ops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/v6ops/>
List-Post: <mailto:v6ops@ietf.org>
List-Help: <mailto:v6ops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/v6ops>, <mailto:v6ops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Aug 2022 01:38:35 -0000

Hi,

from a twitter discussion I had with other admins I'd like to forward a 
problem to this mailing list.

When designing and deploying a redundant IPv6 network with two uplinks 
the current design is to use IPv6-PI space for the internal network. But 
when we would scale this approach to all businesses that have (or want 
to have) redundant uplinks it would pollute and fragment the global 
routing tables (making full table lookups harder).

Someone said that they consider using NAT66 for this. But as we all know 
NAT66 is exactly what we don't want with IPv6 ;-)

For client only networks we could just deprecate the prefix on 
switchover, but that would only allow a active-passive utilization while 
both are active. But for servers?

Also another issue is that at least here none of the standard contracts 
with ISPs contains BGP for announcing the IPv6-PI space. And only 
increasing the plan to an enterprise level with a way higher monthly fee 
is also an adoption blocker compared to just buying multiple of the 
cheaper lines with IPv4.

So therefore these questions arise:

  * Is there anything that admins can do right now (without an updated
    or additional RFC) to solve this?
  * Is doing a "full view" just something one shouldn't be doing anymore
    with IPv6?
  * Considering the above, is the best way to buy services from a
    centralized anycast as a service provider and have a redundant
    connection to them? (Which kinda would work against the reason why
    we have people doing full view BGP in the first place. It also kinda
    would introduce a new single point of failure into the High
    Availability environment).
  * Mobile IPv6 also looks kinda interesting in this context, but I
    don't know of any suitable suitable real world deployment. Esp. not
    over WAN.
  * Am I just not seeing the forest for the trees?

Sincerely,
Klaus Frank